// AWS / NFTABLES

AWS · nftables

nftables ruleset for AWS CIDRs. 17,568 CIDRs, refreshed daily.

// nftables_aws_allow.conf

DOWNLOAD ↓ ·

# Aws IP Ranges
# Updated: 2026-10-10 02:32:04
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables allow rules for aws

table inet filter_aws_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 1.178.1.0/24 accept
    ip saddr 1.178.4.0/22 accept
    ip saddr 1.178.8.0/22 accept
    ip saddr 1.178.16.0/20 accept
    ip saddr 1.178.64.0/23 accept
    ip saddr 1.178.72.0/21 accept
    ip saddr 1.178.88.0/21 accept
    ip saddr 1.178.100.0/22 accept
    ip saddr 1.178.172.0/23 accept
    ip saddr 1.178.174.0/24 accept
    ip saddr 1.179.2.0/23 accept
    ip saddr 1.179.14.0/23 accept
    ip saddr 1.179.52.0/22 accept
    ip saddr 1.179.56.0/22 accept
… (4075 more lines)

// nftables_aws_deny.conf

DOWNLOAD ↓ ·

# Aws IP Ranges
# Updated: 2026-10-10 02:32:04
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables deny rules for aws

table inet filter_aws_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 1.178.1.0/24 drop
    ip saddr 1.178.4.0/22 drop
    ip saddr 1.178.8.0/22 drop
    ip saddr 1.178.16.0/20 drop
    ip saddr 1.178.64.0/23 drop
    ip saddr 1.178.72.0/21 drop
    ip saddr 1.178.88.0/21 drop
    ip saddr 1.178.100.0/22 drop
    ip saddr 1.178.172.0/23 drop
    ip saddr 1.178.174.0/24 drop
    ip saddr 1.179.2.0/23 drop
    ip saddr 1.179.14.0/23 drop
    ip saddr 1.179.52.0/22 drop
    ip saddr 1.179.56.0/22 drop
… (4075 more lines)